This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft File: F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft (raw, json) Hash identifier: 0uMA+TaEDm+jKNOL8a/j+CgBy+FlKsn0gqz8trp4w5M= Subject key identifier: 7D:06:93:56:91:CA:D6:BA:B8:69:ED:FC:C5:3A:50:DA:3D:E3:0D:E8 Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0 Certificate issuer: /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0 Certificate serial: 67C605E29414BFFED8061A5CA78CD51671965BDC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft Manifest number: 034D Signing time: Wed 24 Dec 2025 00:56:10 +0000 Manifest this update: Wed 24 Dec 2025 00:51:10 +0000 Manifest next update: Thu 25 Dec 2025 01:22:10 +0000 Files and hashes: 1: F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl (hash: 2FMkKFViTtCTDmDm0jl3Q1+HTd6wBZDykd/GLXk88U0=) 2: 323830343a346364383a3a2f33322d3438203d3e20323637333936.roa (hash: bqYXXfEQJ7ynYHhQPonZJxpqMMsAjcz8KKbatLQNpOE=) 3: 34352e3233332e3230302e302f32322d3332203d3e20323637333936.roa (hash: U8dEb1Kq0QIYCyA8Vxhje1om0LDccxhV98xD4EqiDXI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 01:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c6:05:e2:94:14:bf:fe:d8:06:1a:5c:a7:8c:d5:16:71:96:5b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0 Validity Not Before: Dec 24 00:51:10 2025 GMT Not After : Dec 25 01:22:10 2025 GMT Subject: CN=7D06935691CAD6BAB869EDFCC53A50DA3DE30DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:6f:1e:a8:74:cd:39:ad:df:cd:a9:66:31: a5:7b:1d:38:61:9b:75:51:3c:6d:39:62:2f:d6:f1: 4c:1a:99:19:28:68:9e:b3:61:77:45:f3:56:56:61: 82:94:ac:af:25:9b:9e:1a:52:8e:91:f8:c6:b5:06: 48:a6:f9:de:f3:4e:3e:3b:04:0e:13:6b:e5:ab:52: e6:6a:7b:5a:4d:3b:4e:6a:4c:5a:cf:58:52:dd:f2: 25:79:2b:4e:6c:07:d1:16:48:5d:09:68:e9:e6:ce: 2f:ef:1d:04:a9:e6:75:61:13:52:07:5c:c5:f3:32: ec:73:2d:88:45:cc:e9:f6:9f:30:c5:84:8f:d1:e5: 22:3a:ad:a2:0b:97:e9:1a:66:10:74:b2:f1:ed:b9: 1e:6b:81:84:be:9f:c0:a1:1e:25:6f:a3:21:9f:11: 05:80:9f:38:55:e2:12:b0:7f:d0:0c:96:6a:96:c4: 4b:10:a9:96:bf:70:ed:23:f4:48:2f:fd:01:07:07: e2:f9:0e:f7:e8:1e:a8:5f:ac:f9:0e:06:53:87:22: 0d:be:49:01:aa:da:93:f3:de:30:19:3e:eb:2b:95: 72:a8:bc:06:c9:77:c1:33:b0:c6:ef:d2:39:cc:0d: ef:ff:e0:69:cd:94:38:91:da:9a:eb:8b:72:1b:59: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:93:56:91:CA:D6:BA:B8:69:ED:FC:C5:3A:50:DA:3D:E3:0D:E8 X509v3 Authority Key Identifier: keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:27:96:e1:bb:8e:4e:ef:53:88:78:39:78:6e:22:89:ba:96: 42:af:9e:30:15:e1:a1:39:4b:86:0c:59:d5:86:7c:f7:51:66: 2d:5c:16:8d:56:b1:45:ea:01:0a:59:69:d9:59:8e:10:34:ee: 12:6b:0d:c1:eb:c7:19:59:e6:0c:b9:b2:c8:f4:2f:1c:4b:68: 47:4b:91:11:51:6d:85:7e:4e:6f:d5:32:3e:a6:14:ba:45:bf: 33:a3:de:c5:07:39:54:97:d7:59:17:c8:fc:68:0a:09:19:bb: 3f:fc:66:bc:0a:58:3f:07:c6:df:11:b4:6f:c4:a0:fb:40:ff: 63:30:08:3b:2e:1c:d2:38:5c:88:3b:0c:46:b0:80:92:fb:ce: 89:23:74:04:da:47:b5:8d:3d:78:b8:a4:c4:94:d4:8c:4d:12: 4d:43:7f:af:1d:01:33:b2:6b:ae:0a:7d:e4:fb:63:c0:0b:c4: 0b:07:18:ab:51:b8:bc:ba:df:5f:db:ff:0e:2a:ed:a5:ab:cb: d3:ee:a9:5e:18:5a:16:b4:57:37:70:a1:ac:61:94:a5:d6:3e: 3e:33:5e:fb:45:d5:b4:97:ce:b7:2f:8d:b0:2f:04:59:65:c6: 96:11:9e:e7:3c:75:b8:f7:6c:89:54:58:98:9b:31:c0:a8:45: 36:6d:bd:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ8YF4pQUv/7YBhpcp4zVFnGWW9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEQkZGMkZFMDIxQjM2ODNDMEU4MDZERTAxN0M2RTMx MDQwQzZEMDAeFw0yNTEyMjQwMDUxMTBaFw0yNTEyMjUwMTIyMTBaMDMxMTAvBgNV BAMTKDdEMDY5MzU2OTFDQUQ2QkFCODY5RURGQ0M1M0E1MERBM0RFMzBERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTm8eqHTNOa3fzalmMaV7HThh m3VRPG05Yi/W8UwamRkoaJ6zYXdF81ZWYYKUrK8lm54aUo6R+Ma1Bkim+d7zTj47 BA4Ta+WrUuZqe1pNO05qTFrPWFLd8iV5K05sB9EWSF0JaOnmzi/vHQSp5nVhE1IH XMXzMuxzLYhFzOn2nzDFhI/R5SI6raILl+kaZhB0svHtuR5rgYS+n8ChHiVvoyGf EQWAnzhV4hKwf9AMlmqWxEsQqZa/cO0j9Egv/QEHB+L5DvfoHqhfrPkOBlOHIg2+ SQGq2pPz3jAZPusrlXKovAbJd8EzsMbv0jnMDe//4GnNlDiR2prri3IbWT0bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfQaTVpHK1rq4ae38xTpQ2j3jDegwHwYDVR0j BBgwFoAU89v/L+Ahs2g8DoBt4BfG4xBAxtAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEdqTVMyMnA0SEJueEtxQUJQcXAzOTZ2Y3BzdkxuMXhndkRoUkF3a0xV M1MvMC9GM0RCRkYyRkUwMjFCMzY4M0MwRTgwNkRFMDE3QzZFMzEwNDBDNkQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzREJGRjJGRTAyMUIzNjgz QzBFODA2REUwMTdDNkUzMTA0MEM2RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEdqTVMyMnA0SEJueEtxQUJQcXAzOTZ2Y3BzdkxuMXhndkRoUkF3a0xVM1MvMC9G M0RCRkYyRkUwMjFCMzY4M0MwRTgwNkRFMDE3QzZFMzEwNDBDNkQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtieW4buOTu9TiHg5eG4iibqWQq+eMBXhoTlLhgxZ1YZ891FmLVwWjVaxReoB Cllp2VmOEDTuEmsNwevHGVnmDLmyyPQvHEtoR0uREVFthX5Ob9UyPqYUukW/M6Pe xQc5VJfXWRfI/GgKCRm7P/xmvApYPwfG3xG0b8Sg+0D/YzAIOy4c0jhciDsMRrCA kvvOiSN0BNpHtY09eLikxJTUjE0STUN/rx0BM7Jrrgp95PtjwAvECwcYq1G4vLrf X9v/DirtpavL0+6pXhhaFrRXN3ChrGGUpdY+PjNe+0XVtJfOty+NsC8EWWXGlhGe 5zx1uPdsiVRYmJsxwKhFNm29yA== -----END CERTIFICATE-----Generated at Wed Dec 24 14:30:15 2025 by rpki-client